$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer File: C16E46D556A47D2429EC847E95E7C429D38AC26D.cer (raw, json) Hash identifier: /2jGaNl0uQ5Qt/zrVWMtMNEXNBRQhfOeOue9QHZW3Ac= Subject key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 54D009A560586CF1C50DC4CC299CCFDEA057CC71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft caRepository: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 16:38:36 +0000 Certificate not after: Wed 14 Apr 2027 16:43:36 +0000 Subordinate resources: IP: 122.248.32.0/20 IP: 202.43.112.0/23 IP: 202.58.242.0/23 IP: 203.30.254.0/23 IP: 2400:7500::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d0:09:a5:60:58:6c:f1:c5:0d:c4:cc:29:9c:cf:de:a0:57:cc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 16:38:36 2026 GMT Not After : Apr 14 16:43:36 2027 GMT Subject: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:05:34:90:34:06:c9:6c:bc:8a:b2:6f:93: 08:ea:d3:20:01:ed:0c:ce:0a:bd:dc:1c:b3:92:10: 24:c9:75:3e:16:03:ff:07:c7:6f:6a:a4:23:52:ae: ea:b3:40:23:dd:ca:4a:0f:cb:65:7f:d3:55:26:95: 0b:7e:e4:f9:1e:39:fb:fa:e7:4c:08:e8:62:80:03: 33:83:0f:c9:7c:d0:8f:04:74:82:ee:4d:ad:db:a7: 3c:af:2d:02:cc:50:b9:28:80:d9:f1:32:de:56:f5: cc:81:78:74:14:84:82:9c:2d:3e:b5:63:b4:8b:15: 79:4a:5f:fc:cb:06:07:d6:47:bf:c0:d3:33:1c:c0: 3f:50:2f:7e:98:ae:8f:dd:8d:36:af:75:80:5a:91: f7:8c:1e:c8:58:ce:32:85:91:d0:f5:bc:4a:4f:95: 5d:d7:25:4c:53:cc:3e:3c:46:7d:c9:58:81:9b:51: 74:79:ce:b0:26:80:1b:90:a6:04:4c:78:5c:85:70: fd:e8:bf:05:9a:8a:a9:48:86:68:c4:9b:91:aa:75: 66:f6:a3:5d:40:eb:e2:42:29:d4:84:41:3a:51:af: 8a:25:39:e1:cf:bd:4e:bc:4e:bb:70:0c:bc:59:b4: d6:9a:d1:dd:27:64:e1:23:8c:0d:9c:5f:07:3f:6f: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.32.0/20 202.43.112.0/23 202.58.242.0/23 203.30.254.0/23 IPv6: 2400:7500::/32 Signature Algorithm: sha256WithRSAEncryption 1c:8c:6a:6a:c3:ac:39:ec:4d:87:29:fa:00:84:b2:3e:cf:d9: 13:d9:b6:56:61:4a:62:be:f4:68:b5:d0:65:3e:7f:92:bb:43: 58:48:bb:47:6d:f0:4d:50:dd:f6:6a:ed:b7:24:7c:40:7f:e9: 41:7a:f8:5b:c2:c0:68:aa:71:4e:62:5f:3e:10:ce:cc:10:5f: 49:29:d6:c8:78:ff:56:87:d6:c7:e0:c3:fb:53:02:29:95:b2: ba:3d:3e:c9:1e:e7:79:aa:02:4f:45:b6:61:42:ae:a5:d6:12: 2e:2b:e4:b1:7d:32:b8:78:86:0e:e8:fd:8f:2a:7b:cd:3e:44: d0:47:5b:72:85:6c:d2:34:4a:90:a3:f0:e0:58:8f:65:67:f7: 3d:eb:7c:d4:9a:5f:e5:32:23:a9:2c:9e:d3:d6:bf:fe:35:7f: 6f:ca:8c:3e:3a:af:0d:48:d0:88:c6:4f:00:0e:0c:ab:3b:a4: 39:f8:ba:2c:e1:bf:ed:e7:a3:e2:bf:8a:96:05:b7:6c:98:71: 65:29:c6:15:21:fb:d1:d7:a0:4b:9a:f2:e2:1d:69:83:31:33: a0:d7:5a:51:37:16:13:22:0b:ae:2d:df:39:4b:17:c1:16:af: 7e:f8:54:c8:52:35:67:26:b2:a6:5f:bd:a4:a0:bd:68:f1:fd: 05:8e:ae:f0 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUVNAJpWBYbPHFDcTMKZzP3qBXzHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNTE2MzgzNloX DTI3MDQxNDE2NDMzNlowMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4 NDdFOTVFN0M0MjlEMzhBQzI2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkeBTSQNAbJbLyKsm+TCOrTIAHtDM4Kvdwcs5IQJMl1PhYD/wfHb2qkI1Ku 6rNAI93KSg/LZX/TVSaVC37k+R45+/rnTAjoYoADM4MPyXzQjwR0gu5NrdunPK8t AsxQuSiA2fEy3lb1zIF4dBSEgpwtPrVjtIsVeUpf/MsGB9ZHv8DTMxzAP1Avfpiu j92NNq91gFqR94weyFjOMoWR0PW8Sk+VXdclTFPMPjxGfclYgZtRdHnOsCaAG5Cm BEx4XIVw/ei/BZqKqUiGaMSbkap1ZvajXUDr4kIp1IRBOlGviiU54c+9TrxOu3AM vFm01prR3Sdk4SOMDZxfBz9vTmkCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMFuRtVWpH0kKeyEfpXnxCnTisJtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2 LWViNWUtNDgwYS04ZTk3LWM1NWY2OGUwNTg5YS8wL0MxNkU0NkQ1NTZBNDdEMjQy OUVDODQ3RTk1RTdDNDI5RDM4QUMyNkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAR6+CADBAHKK3ADBAHKOvIDBAHLHv4wDQQCAAIwBwMFACQAdQAwDQYJKoZIhvcN AQELBQADggEBAByMamrDrDnsTYcp+gCEsj7P2RPZtlZhSmK+9Gi10GU+f5K7Q1hI u0dt8E1Q3fZq7bckfEB/6UF6+FvCwGiqcU5iXz4QzswQX0kp1sh4/1aH1sfgw/tT AimVsro9Pske53mqAk9FtmFCrqXWEi4r5LF9Mrh4hg7o/Y8qe80+RNBHW3KFbNI0 SpCj8OBYj2Vn9z3rfNSaX+UyI6ksntPWv/41f2/KjD46rw1I0IjGTwAODKs7pDn4 uizhv+3no+K/ipYFt2yYcWUpxhUh+9HXoEua8uIdaYMxM6DXWlE3FhMiC64t3zlL F8EWr374VMhSNWcmsqZfvaSgvWjx/QWOrvA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:47:37 2026 by rpki-client